[JIRA] (IDP-2091) Enhance control of AuthnInstant in MFA flow

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiMWM3MzJhYzgzNGZjNDYzYWI1MDhiZjZlOWI5NjE3NTIiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/IDP-2091?atlOrigin=eyJpIjoiMWM3MzJhYzgzNGZjNDYzYWI1MDhiZjZlOWI5NjE3NTIiLCJwIjoiaiJ9 ) IDP-2091 ( https://shibboleth.atlassian.net/browse/IDP-2091?atlOrigin=eyJpIjoiMWM3MzJhYzgzNGZjNDYzYWI1MDhiZjZlOWI5NjE3NTIiLCJwIjoiaiJ9 ) Enhance control of AuthnInstant in MFA flow ( https://shibboleth.atlassian.net/browse/IDP-2091?atlOrigin=eyJpIjoiMWM3MzJhYzgzNGZjNDYzYWI1MDhiZjZlOWI5NjE3NTIiLCJwIjoiaiJ9 )

Issue Type: Improvement Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Authentication Created: 18/Apr/23 4:20 PM Fix Versions: 5.0.0 Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )

With discussions happening around the “right” way to populate AuthnInstant, the current IdP behavior is limiting because it requires some custom work to avoid the MFA flow simply populating it with the current time any time the flow actually runs, even if it programatically ends up reusing the underlying factors.

I think the cleanest fix is that it ought to be defaulting to either populating the earliest or latest timestamp from the constituent results, with a property allowing that toggle, without requiring further custom work.

( https://shibboleth.atlassian.net/browse/IDP-2091#add-comment?atlOrigin=eyJpIjoiMWM3MzJhYzgzNGZjNDYzYWI1MDhiZjZlOWI5NjE3NTIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2091#add-comment?atlOrigin=eyJpIjoiMWM3MzJhYzgzNGZjNDYzYWI1MDhiZjZlOWI5NjE3NTIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100222- sha1:c08beee )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230418/d6a67b88/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-d0e024e1-8e9d-4425-92d0-d939fc8a98ab
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230418/d6a67b88/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-48ff39e2-2aa9-4562-8e06-e5b78d07c7a8
Type: image/png
Size: 448 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230418/d6a67b88/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-aebeb9e5-82ba-45b0-aaae-60da63715609
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230418/d6a67b88/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-f7f502fa-a8e2-49a1-ba5a-c976a5ba327e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230418/d6a67b88/attachment-0007.png>